Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/jDb9ir3XH-aq3U2bk9W59Tt0PIM.roa
File: jDb9ir3XH-aq3U2bk9W59Tt0PIM.roa (raw, json)
Hash identifier: fwBJjeRg7PDt/L8go08QRMWlZrcLXpRGkUetCMQoQ70=
Subject key identifier: 8C:36:FD:8A:BD:D7:1F:E6:AA:DD:4D:9B:93:D5:B9:F5:3B:74:3C:83
Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Certificate serial: 0CDE
Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/jDb9ir3XH-aq3U2bk9W59Tt0PIM.roa
Signing time: Mon 26 Aug 2024 05:26:18 +0000
ROA not before: Mon 26 Aug 2024 05:26:18 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 150.129.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3294 (0xcde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Validity
Not Before: Aug 26 05:26:18 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=8C36FD8ABDD71FE6AADD4D9B93D5B9F53B743C83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0b:37:6f:16:59:81:c1:58:0f:6e:09:c5:53:
63:8c:b3:30:9a:f3:f6:58:99:a5:12:ab:95:c8:67:
33:27:2c:1f:9b:93:91:6e:c5:a5:28:da:8f:b8:c6:
ea:4d:b3:86:b4:07:a1:2c:44:51:49:c7:f1:87:86:
e7:1c:77:04:d8:1a:d4:ec:d0:a1:19:20:96:d7:7e:
4c:43:56:e8:bc:52:be:4d:d8:ca:a5:58:23:af:9c:
91:7a:7f:b6:b7:0d:61:14:6b:62:c1:d9:b3:7a:76:
e6:48:dc:46:08:37:32:93:4a:f8:24:7c:2e:13:80:
2e:64:9b:a9:d8:97:f0:d5:9b:ad:89:29:d0:ab:e3:
6e:40:fd:2e:3c:58:d9:a9:97:0c:84:a5:80:35:b1:
3e:78:3b:f9:3a:7e:1b:bd:2d:1e:20:47:49:d7:16:
9e:58:ac:62:3f:af:38:af:6b:56:c1:e5:b8:34:a3:
77:0f:73:ab:1f:63:38:13:4a:e6:e7:66:21:b7:7d:
78:1f:7f:5b:4f:53:98:c3:4d:a1:fa:50:83:f3:84:
36:c7:1a:43:28:8f:20:7c:e5:73:70:79:83:6d:dc:
cf:6e:d8:10:30:80:4d:cf:b9:31:6d:19:b8:5d:92:
3d:a5:19:f2:67:37:6f:9f:ec:ae:70:37:ef:48:e1:
ed:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:36:FD:8A:BD:D7:1F:E6:AA:DD:4D:9B:93:D5:B9:F5:3B:74:3C:83
X509v3 Authority Key Identifier:
keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/jDb9ir3XH-aq3U2bk9W59Tt0PIM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.129.72.0/22
Signature Algorithm: sha256WithRSAEncryption
27:a3:0b:b5:cc:d1:6d:74:4c:c7:fc:0b:22:d6:74:83:ec:a8:
81:cd:ff:ed:74:10:72:d0:f5:45:ae:27:7e:0b:02:a1:a9:0c:
ab:97:8e:c6:34:49:65:22:44:94:8d:f3:e4:a2:ec:9a:b7:fe:
25:c7:84:13:bb:85:9d:75:04:77:96:fa:8d:b8:c1:e2:a5:37:
d4:da:34:87:21:84:65:da:b0:64:0c:88:ca:4c:da:55:a9:e5:
49:f3:26:8f:79:7e:70:72:81:15:34:2f:30:4c:9a:fe:4f:88:
44:04:12:d8:3f:4f:c5:5d:d2:45:18:18:a3:39:9a:ce:19:62:
2f:68:d6:45:34:b1:be:ce:e6:5f:1a:e8:77:74:3f:5b:9a:1b:
6c:7d:ae:e8:88:da:0a:50:71:47:bf:4e:00:d6:52:a3:61:eb:
76:0b:39:0f:7b:2e:10:d6:07:3d:04:44:41:1a:f0:5d:7c:de:
e1:b0:83:dc:d1:53:ca:b4:18:8e:fa:57:d7:d4:8f:05:f6:35:
8c:8c:95:87:e5:aa:c9:9f:b5:ad:b9:a4:2d:0f:7c:f1:e3:10:
52:26:c4:95:c5:22:02:cc:5d:e2:08:c8:dc:a4:88:42:51:74:
fe:51:38:a4:29:78:5e:16:c8:35:01:90:87:bc:32:cc:8d:0d:
f6:fc:52:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:50:24 2025 by rpki-client